Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

PowerScale OneFS HDFS Configuration Guide

PDF

Configure Kerberos authentication for Hadoop clients (CLI)

If you want Hadoop compute clients running Hadoop 2.2 and later to connect to an access zone through Kerberos, you must modify the core-site.xml and hdfs-site.xml files on the Hadoop clients.

Kerberos must be set as the HDFS authentication method in the access zone and a Kerberos authentication provider must be configured and assigned to the access zone.

Note that if you are changing the core-site.xml and hdfs-site.xml files directly with an editor per the instructions below, this will work, but those changes will likely be overwritten. This is because these two configuration files are frequently overwritten by the Ambari or Cloudera Navigator user interfaces. Therefore, if you are managing the cluster with Ambari or Cloudera Navigator, we recommend that you use their respective user interfaces to make any configuration changes.
  1. Go to the $HADOOP_CONF directory on your Hadoop client.
  2. Open the core-site.xml file in a text editor.
  3. Set the value of the hadoop.security.token.service.use_ip property to false as shown in the following example: 
    <property>
  <name>hadoop.security.token.service.use_ip</name> 
  <value>false</value> 
</property>
  4. Save and close the core-site.xml file.
  5. Open the hdfs-site.xml file in a text editor.
  6. Set the value of the dfs.namenode.kerberos.principal.pattern property to the Kerberos realm configured in the Kerberos authentication provider as shown in the following example: 
    <property>
  <name>dfs.namenode.kerberos.principal.pattern</name> 
  <value>hdfs/*@storage.company.com</value> 
</property>
  7. Save and close the hdfs-site.xml file.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\